CVE-2002-1657

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2025-01-16

Weaknesses

CWE-916

Affected products

• Postgresql (Postgresql)

References

• http://archives.postgresql.org/pgsql-admin/2002-08/msg00253.php
• http://marc.info/?l=bugtraq&m=111402558115859&w=2
• http://marc.info/?l=bugtraq&m=111403050902165&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20215